Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/AXiA8aFek585y3bXbLY8syGeJo8.roa
File: AXiA8aFek585y3bXbLY8syGeJo8.roa (raw, json)
Hash identifier: 1iYddwjeVGE7y9KAdibtXprYK5xNfa9Rqr3RJVDyFro=
Subject key identifier: 01:78:80:F1:A1:5E:93:9F:39:CB:76:D7:6C:B6:3C:B3:21:9E:26:8F
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 018F724E010DBFEA999EF54A96C0469DCA12
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/AXiA8aFek585y3bXbLY8syGeJo8.roa
Signing time: Mon 13 May 2024 14:14:25 +0000
ROA not before: Mon 13 May 2024 14:14:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 46.29.234.0/24 maxlen: 24
46.29.235.0/24 maxlen: 24
46.29.238.0/24 maxlen: 24
85.159.228.0/24 maxlen: 24
85.159.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:4e:01:0d:bf:ea:99:9e:f5:4a:96:c0:46:9d:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: May 13 14:14:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=017880f1a15e939f39cb76d76cb63cb3219e268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:5f:09:2e:48:34:9e:44:18:94:10:da:58:
e8:8f:a4:a1:6f:cd:2b:bb:11:e0:db:0a:a9:c6:7f:
f2:bf:73:00:65:a0:29:3d:e7:3b:87:ef:46:5c:cb:
45:46:93:c0:6b:cd:9e:d1:d3:87:85:21:fc:77:00:
70:27:7d:d6:48:a1:3b:e2:e1:fd:06:41:56:e7:a8:
14:14:b9:65:ae:c1:3d:bc:bf:af:e5:91:7c:01:41:
09:0f:68:2b:b4:be:6c:3d:a8:5c:a0:7c:73:06:ab:
df:69:95:cd:a9:cd:6f:5f:c4:d4:a1:af:56:15:0c:
bf:49:c3:f5:aa:ea:08:8d:44:c7:e3:14:9e:52:6f:
96:19:e7:eb:67:88:84:eb:ab:38:af:b8:eb:94:d1:
1c:1f:9c:a7:f7:4d:2f:ac:82:3c:15:93:c4:5c:8c:
33:c0:85:65:6a:5a:a0:c4:4f:3e:ad:d9:7e:26:38:
61:2b:c8:56:e5:86:6d:32:0a:70:3c:d5:bd:11:6c:
b5:f3:f8:a8:ca:d2:f4:47:af:87:08:36:a3:2d:34:
a3:d9:24:e7:17:60:46:3b:a7:27:a3:12:8d:cb:a4:
b8:2e:3f:48:88:5d:d6:35:57:93:43:35:b4:55:03:
98:9e:92:37:bd:e3:fe:88:68:a7:dd:d0:6b:35:a9:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:78:80:F1:A1:5E:93:9F:39:CB:76:D7:6C:B6:3C:B3:21:9E:26:8F
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/AXiA8aFek585y3bXbLY8syGeJo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.234.0/23
46.29.238.0/24
85.159.228.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f2:12:9c:34:f5:a1:e1:35:a0:22:26:44:bb:65:0e:f5:34:
85:04:8c:fe:85:fc:ea:c2:5e:e7:32:1d:01:4d:cc:5a:2d:0c:
7b:bb:65:f6:d3:1a:8c:0b:81:b6:c6:7a:6c:7f:94:03:bb:88:
66:a8:ff:61:7c:e9:03:5e:fa:b2:25:66:81:f9:ca:09:fe:cb:
37:5e:6b:23:7b:4d:36:36:6d:d2:e5:3e:4d:25:0a:86:09:26:
af:ac:fd:cc:c2:d9:9b:4e:90:76:f5:ae:4b:55:22:1c:f0:b6:
b0:90:8d:d8:b3:c0:67:8e:a7:b0:b4:40:68:67:e5:7e:7c:f8:
44:3c:30:09:54:a5:d3:e3:a9:c3:8d:ad:a4:99:97:9d:15:a8:
19:e6:1d:5d:a9:07:a2:f7:f3:26:1c:43:8f:d0:fe:85:3b:96:
60:bf:56:89:d0:a8:60:40:ec:54:fd:a0:dc:89:14:0a:a0:bb:
b1:8a:aa:ac:75:05:05:dc:53:88:e1:d3:9a:8d:5a:01:cf:1e:
b6:9f:90:fe:10:9d:b5:0e:3a:0a:cc:21:c7:89:1e:39:62:f6:
f5:0c:f6:02:56:12:96:7e:98:fe:75:7f:7a:21:c5:86:39:e3:
7b:08:b6:c7:57:bc:49:08:4c:9e:fb:a3:f8:df:69:b1:96:f3:
46:9a:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:48:30 2024 by rpki-client on console-ams.rpki-client.org